The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill's documentation contains instructions for an agent to install a payment utility using npx -y @alipay/agent-payment@latest. This refers to an official package from a well-known financial services provider (Alipay) and is used for purchasing a separate paid version of the tool.
[DATA_EXFILTRATION]: The implementation in scripts/engine/retail-member-points-check.js and scripts/run.mjs is strictly local. It uses only Node.js standard libraries and contains no code for making network requests (e.g., no fetch, http, or https modules), ensuring that processed financial data does not leave the local environment.
[INDIRECT_PROMPT_INJECTION]: The skill processes external table data provided by users.
Ingestion points: Data is ingested via the --input flag in scripts/run.mjs or passed as a text string to the engine.
Boundary markers: The skill expects structured tabular data (Tab-separated or space-separated) with specific headers, which naturally delimits input.
Capability inventory: The skill has Read and Bash permissions to execute its local Node.js scripts, but does not use them to execute arbitrary commands from input data.
Sanitization: The logic in scripts/engine/retail-member-points-check.js strictly parses inputs into numbers and identifies specific business-logic columns, ignoring and not executing non-numeric content as code.

retail-member-points-check-free